Skip to content

CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-30346

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2025-03-21
Updated: 2025-04-03
Assigning organization: mitre

Description

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

varnish-software Varnish Cache

Default version status: unknown

7.5.0 to < 7.6.2affected

References